Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/631cf125-1ec8-3250-a5a3-039659e5bdfb.roa
File:                     631cf125-1ec8-3250-a5a3-039659e5bdfb.roa (raw, json)
Hash identifier:          2OrTg7Jinzm5DBoACWpFwUj+zsDrU5nJzwtoEwqZohE=
Subject key identifier:   43:1C:99:46:BA:A1:5D:65:43:16:BC:4E:60:6A:8B:60:69:EE:99:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858395BD696C87A18ADDA6079ED80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/631cf125-1ec8-3250-a5a3-039659e5bdfb.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Wed 17 Mar 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2607:f098:3200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5b:d6:96:c8:7a:18:ad:da:60:79:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2027 GMT
        Subject: CN=c847fb79-bf49-4f88-805b-07dae70273f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:93:82:a1:af:5c:53:e2:11:2e:e7:a2:62:
                    aa:ae:c6:44:fa:cb:ea:4e:02:0d:32:6c:72:f3:80:
                    a8:11:fd:2c:4a:53:ea:db:d0:cd:72:9b:ac:63:f4:
                    37:9a:88:eb:bc:ee:91:88:5b:be:c6:39:a0:e7:6e:
                    13:9c:36:1f:1b:e0:f1:9e:79:55:71:f7:64:51:c5:
                    38:80:18:a0:f9:fc:84:51:71:71:7b:fe:ea:fb:35:
                    5b:eb:1c:b3:38:88:a8:09:33:03:ed:9c:bb:d7:e8:
                    5b:e3:1b:f5:36:ad:6e:fe:1c:9c:af:74:00:95:ba:
                    a9:be:4d:41:02:69:ce:a8:8c:dd:16:b6:bc:07:4c:
                    eb:bb:62:dc:ab:a5:57:70:a3:82:1e:3b:70:ac:7b:
                    00:36:92:07:9d:57:f7:9f:92:0a:db:e9:3b:14:e4:
                    80:91:4d:c5:d6:00:97:02:61:da:aa:99:31:a8:28:
                    ae:8e:78:c1:1b:79:85:c2:3a:b9:20:5f:18:71:ce:
                    3b:f0:ad:96:36:f5:d3:17:10:cb:1a:a5:d2:7b:1a:
                    53:4e:81:f8:34:dc:33:85:ea:da:7f:33:a3:ac:3b:
                    b8:05:15:b9:ec:15:7d:50:d4:8a:f1:65:35:52:29:
                    f9:a2:15:eb:56:a9:f6:1f:3c:02:7b:b4:4a:e1:12:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1C:99:46:BA:A1:5D:65:43:16:BC:4E:60:6A:8B:60:69:EE:99:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/631cf125-1ec8-3250-a5a3-039659e5bdfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:42:cd:ec:66:b4:34:15:3c:86:db:d1:5d:3c:b1:21:93:
         fa:41:71:bf:7c:00:c4:6e:66:b0:a1:5b:e6:fe:fb:fd:11:41:
         d4:f2:40:49:e8:75:cd:9f:78:d6:15:ed:bd:fa:3a:ce:12:e2:
         51:64:d3:1c:e0:3c:f0:5b:c1:6c:a3:95:7f:cf:ae:b1:7e:e6:
         66:fc:cc:28:25:79:44:96:6a:30:95:da:6a:5c:74:2c:10:27:
         c7:05:97:76:59:a6:2b:4a:a9:33:be:c6:df:86:49:05:82:28:
         4b:4d:9a:33:a8:d1:c2:95:b3:b4:1e:2f:2f:be:b6:20:b4:3c:
         9f:25:43:ae:a5:99:23:9d:ab:32:b8:71:6e:58:ec:ce:17:53:
         0f:9c:c0:3b:85:fd:0e:99:fc:fb:e4:11:52:3d:19:08:ea:32:
         75:df:db:58:3a:83:e6:19:21:3b:31:de:e4:41:0c:db:f8:1c:
         94:aa:ca:b8:fb:b5:e8:df:03:93:ca:af:f5:65:2d:30:c4:9e:
         1b:e5:4c:02:7a:e3:5a:c5:02:6d:74:e4:e1:aa:c8:38:5d:7c:
         11:a8:f8:ee:7e:fb:7a:be:3d:20:b3:a1:c1:9a:f4:60:83:f5:
         7c:c4:8e:fc:b0:29:01:74:4e:26:16:a8:f6:31:7f:09:2f:fb:
         da:8f:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org